Greetings, Chris Louden! > I'm currently searching the mailing list archive as well as google but > I thought I would ask out right aw well.. I'm looking to implement a > private Cygwin mirror. The process seem fairly straight forward > setting up an apache instance and rsycing twice a day. However our > NetSec folks have asked is there is any way I can sync the local repo > via an authenticated or encrypted method. I guess to rule out a man in > the middle scenario. If anyone has done anything similar I would > appreciate the feedback.
Probably. You could get setup.ini from some secure source and check hashes of the packages after sync. I didn't check if there's any available, but supposedly there should be at least one. -- With best regards, Andrey Repin Thursday, September 3, 2015 04:45:27 Sorry for my terrible english... -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple